Linux kernel.

net/rds: don't let rds_conn_shutdown() consume a concurrent drop

• Linux kernel

erofs: disable LZ4 rolling decompression for now

• Linux kernel

ALSA: caiaq: Fix potential double-free at error path

• Linux kernel

bpf: Reject key-less BTF for hash maps

• Linux kernel

bpf: Fix NULL-ptr-deref when showing a void BTF type

• Linux kernel

bpf: Fix NULL-ptr-deref in btf_var_show()

• Linux kernel

bpf: Mark signal tracepoint siginfo arguments as scalar

• Linux kernel

bpf: Reject tail calls directly from callback frames

• Linux kernel

bpf: Reject resilient lock operations in rbtree callbacks

• Linux kernel

bpf: Mark sched_process_wait argument as nullable

• Linux kernel

bpf: Mark syscall helpers as sleepable

• Linux kernel

ring-buffer: Add checking nr_subbufs to persistent ring buffer validation

• Linux kernel

nvme: remove stale namespaces by NSID range during scan

• Linux kernel

ASoC: Intel: avs: Clean up the bus when fetching ML caps fails

• Linux kernel

ASoC: Intel: avs: Fix unbalanced module reference count

• Linux kernel

ASoC: Intel: avs: Refactor and fix init_config access

• Linux kernel

net: bcmasp: clear txcb->last before writing each descriptor

• Linux kernel

net: bcmasp: fix tx_spb_ring_full() checking same slot cnt times

• Linux kernel

mlxsw: spectrum_ptp: Fix napi_gro_receive() call from GC workqueue context

• Linux kernel

bpf: zero extend the result of an arena 32-bit cmpxchg

• Linux kernel

bpf: don't rewrite bpf_fastcall patterns entered by a jump

• Linux kernel

bpf: Check ancestor frames for rbtree callbacks

• Linux kernel

bpf: Mark bpf_btf_find_by_name_kind() as sleepable

• Linux kernel

bpf: Mark faultable stack helpers as sleepable

• Linux kernel

bpf: Reject legacy packet loads from callbacks

• Linux kernel

bpf: Don't infer non-NULL from a pointer with an unbounded offset

• Linux kernel

bpf: Don't resurrect a scalar id dropped by collect_linked_regs()

• Linux kernel

bpf: Don't predict JMP32 pointer vs zero comparisons

• Linux kernel

bpf: Mark the zero register precise for a register-form NULL check

• Linux kernel

bpf: Require MEM_PERCPU for percpu kptr stores

• Linux kernel

bpf: Keep refcount_acquire nullable for borrowed RCU kptrs

• Linux kernel

bpf: Reject untrusted allocated-object pointers

• Linux kernel

bpf: Preserve special fields in recycled rhtab elements

• Linux kernel

bpf: Cancel special fields when recycling rhtab elements

• Linux kernel

bpf: Mark NULL kptr stores precise

• Linux kernel

bpf: Preserve inner map identity in callback frames

• Linux kernel

tracing: Fix subbuf resize races with trace_pipe_raw readers

• Linux kernel

nexthop: Initialize extack in remove_nh_grp_entry()

• Linux kernel

net: dsa: bcm_sf2: bound the CFP rule dump by the caller's buffer size

• Linux kernel

eth: nfp: bound the ntuple rule dump by the caller's buffer size

• Linux kernel

eth: nfp: drop the replaced rule from the list when reprogramming fails

• Linux kernel

net: dsa: mv88e6xxx: bound the policy rule dump by the caller's buffer size

• Linux kernel

net: bridge: mcast: properly convert mglist to rcu

• Linux kernel

net: usb: cx82310_eth: drop URB after 0xffff reboot sentinel to prevent partial_data heap overflow

• Linux kernel

s390/ism: folio_put() after error

• Linux kernel

vxlan: reject dynamic fdb entries that reference a nexthop id

• Linux kernel

net: cap tx_queue_len at S16_MAX to prevent oversized ring allocations

• Linux kernel

net: reject oversized tx_queue_len at netlink parse time

• Linux kernel

pds_core: fix cmd_regs access racing BAR unmap on reset

• Linux kernel

bpf: mark a NULL call argument precise

• Linux kernel

net: mctp: i3c: serialize probe with bus removal

• Linux kernel

net/sched: defer qdisc freeing after failed creation

• Linux kernel

net/mlx5e: Fix use-after-free race in sample_restore_put()

• Linux kernel

net/mlx5: E-Switch: fix use-after-free in mlx5_eswitch_termtbl_put

• Linux kernel

net/mlx5: E-Switch, prevent mc_list repopulation during vport disable

• Linux kernel

net/sched: fq_pie: clamp quantum in change path

• Linux kernel

net/sched: sfq: clamp quantum in change path

• Linux kernel

net/sched: hhf: clamp quantum in change and init paths

• Linux kernel

net/sched: drr: clamp quantum in change class

• Linux kernel

net/sched: ets: clamp quantum in parse and fallback paths

• Linux kernel